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LISTING OF THE CLAIMS: 




1 . (Currently Amended) A method for securely handling an information unit by a first 
infoniiation processing device (2) interoperating with a second secure information processing 
device (l); s|n particular a chip cord,- whereby the information unit is provided by an issuer, 
the method comprising the steps: 

providing Wngmittinfy (3, 25 5 35) the information unit from the issuer to the first 
information processing device (2), the information unit being processed by a cryptographic 
process; 

providing at least one for the cryptographic process on the second secure information 
processing device (1); and 

the first information processin^device fi) receiving the at least one key from the second 



information processing device, and (ii) < 
unit by using the at least one key. 



^graphically reprocessing (29, 38) the information 



2. (Original) Hie method according to claim 1, comprising: 

providing (3, 25, 35) the information unit from Ore issuer to the first information 
processing device (2)» the information unit being encrypted by wing at least a first key; 

providing the first key from the issuer to the first informatioXprocessing device (2), the 
first key being encrypted by using at least a second key; 

providing the at least one second key on the second secure information processing device 

(i); 
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interconnecting the first information processing device (2) and the second secure 
information processing device (1); 

v side of the second secure information processing device, decrypting (27) the at least 
first key by i^ing the at least second key; and 

decrypting (29) the information unit by using the decrypted at least first key. 



3. (Original) Tte method according to claim 1, comprising: 

providing (3, 25, \5) the information unit from the issuer to the first information 
processing device (2), the information unit being signed by using a signature; 

providing the signature frdm the issuer to the first information processing device (2), the 
signature being generated by using af^east one key; 

providing the at least one key for ^gnature verification on the second secure information 
processing device (1); 

interconnecting the first information Recessing device (2) and the second secure 
information processing device (1); 

transferring the at least one key for signahi^j verification from the second secure 
information processing device to the first information prd^essing device; and 

verifying the signature of the information unit by usfiag the at least one key. 



4. (Original) The method according to claim 2, wherein theydecrypted at least first key is 
transferred to the first information processing device (2) and the information unit is decrypted 
(29) on side of the first device (2). 
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\ 5. (Original) The method according to claim 1, wherein the first information processing 
devi<* (2) provides a control command (26, 36) to the second secure information processing 
device (llto initiate decryption of the at least first key by using the at least second key and/or to 
initiate transferring the signature key for signature verification from the second secure device to 
the first deviceA 

6. (Original) Tne method according to claim 5, wherein the encrypted information unit, 
the encrypted first key, mafm the signature key, and/or the generated signature, and/or the control 
command are downloaded (25^35) from a central server (4)* 

7. (Original) The method ac^ 
signature verification are/is securely stored on the second secure device (1) at time of its issuing 
by the issuer. \ 

8. (Original) The method according to claim 2, wherein at least a third key is provided for 
external authentication and/or release control of the respective information unit 

9. (Original) The method according to claim 8, wheran the first device (2) is initiated to 
gather a new release of the information unit from the issuer, depending on the respective status of 
the third key, \ 

4 
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10. (Original) The method according to claim 9, wherein the new release of the 
information unit is downloaded from an internet server (4) provided by the issuer. 

1 l\(Original) The method according to claim 2, wherein the at least first key and/or the 
signature are/^s randomized between different sessions of providing the information unit from the 
issuer to the firk device (2). 



12. (OriginalKrhe method according to claim 1, wherein the first infbnnationpioc^sm 
device (2) is a terminal\ievice, and the second secure information processing device (1) is a 
portable device. 



13. (Original) The methbd according to claim 12, wherein the terminal device is a chip 
card reader and the portable devices a chip card* 

14. (Currently Amended) A syst^ji for securely handling an information unit, comprising 
a first information processing device (2)\interoperating with a second secure information 
processing device (1 ), in-particular a ohip Q efAthe information unit being provided by an issuer, 
comprising: 

the first device (2) comprising 

a storage for storing the information uify and 
the second secure device (1) comprising 

a storage (6) for storing at least one key for a Cryptographic process; and 
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\ providing the first device farther comprising (\) means for receiving the at least one kev 
from the second information processing device, and (10 means for cryptographically reprocessing 
the information unit by using the at least one key. 

15. (Ontinal) The system according to claim 14, wherein 
the first devwe (2) comprises 

a storage for storing the information unit, encrypted by using at least a first key, 
and a storage for storing the first key, encrypted by using at least a second key; 
the second secure device (1) comprises 

a storage (6) fob storing the at least one second key, and processing means for 
decrypting the at least first key by using the at least second key, and 
providing means for decrypts the information unit by using the decrypted at least first 

16. (Original) The system according tb claim 14, wherein 
the first device (2) comprises \ 

a storage for storing the information unit and a signature for the information unit; 
the second secure device (1) comprises \ 

a storage (6) for storing at least one signature key; 
providing means for verifying the signature of the information unit by using the at least 
one signature key. \ 

6 • \ 
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\ 17. (Original) The system according to claim 14, wherein the second secure device (1) 
provides an access control by means of the information unit. 

18. (CHginal) The system according to claim 14, wherein the second secure device (1) 
comprises a processor to make specific functions of the second secure device usable/accessible on 
Ae first device or on at least a third device (5) attached to the first device, 

19. (Original) ThVsystem according to claim 14, wherein the first device (2) comprises 
processing means for deaypting (29) the information unit by use of the decrypted at least first 
key. \ 

20. (Original) The system according to claim 14, wherein die second secure device (1) 
comprises means to initiate decryption of the at least first key by using the at least second key 
and/or means to initiate transfer of the signature key for signature verification from the second 
secure device to the first device. \ 

21 . (Original) The system according to claim, 14, wherein the first device (2) comprises 
means to download the encrypted information unit, the Encrypted first key, and/or the generated 
signature, and/or the control command, from a central server (4). 
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^22. (Original) The system according to claim 14, wherein the second secure device (1) 
comprises a non-erasable storage to store the second key and/or the signature key at time of its 
issuing. \ 

23. (Original) The system according to claim 14, wherein the first device (2) and/or the 
second secure devicfc (1) comprise/s a storage (6) for storing at least a third key for external 
authentication and/or release control of the information unit and processing means (7) for 

V processing the third key. \ 

24. (Original) The systdn according to claim 23, wherein the first device (2) comprises 
means to initiate download of a new^release of the information unit, depending on the respective 
status ofthe third key. \ 

25. (Original) The system according^ claim 21, wherein the central server (4) comprises 
a randomizer for randomizing the at least first key and/or the signature between different sessions 
of providing the information unit from the issuer t\the first device. 

26. (Original) The system according to claim 14, wherein the first information processing 
device (2) is a terminal device, and the second secure information processing device (1) is a 
portable device. \ 
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27. (Original) The system according to claim 26, wherein the terminal device is a chip 
card reader and the portable device is a chip card. 

28. (CJurrendy Amended) A chip card (1) for securely handling an information unit by 
interoperating Wijh an information handling terminal device (2), comprising a storage (6) for 
storing an at least d^e key for the cryptographic proces s, and means for transmitting the at least 
one key to said handlikg termin al drain* enable said device to crvptographicallv process an 
information unit receivetrbv said device from an issuer , 

29. (Original) The chipNcard according to claim 28, wherein processing means (7) 
performing an access control is controlled by an information unit* 



30. (Original) The chip card accoriting to claim 28, wherein a processor (7) runs specific 
functions on the terminal device (2, 5) or oiispt least a second device attached to the terminal 
device (2, 5). 

31. (Original) Hie chip card according to cfaim 28, further comprising means for 
transferring of the at least one second key to the temqpal device (2, 5) and/or means for 
decrypting of the at least first key by using the at least second^ey and/or means to initiate transfer 
of the signature key for signature verification. 
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\ 32. (Original) The chip card according to claim 30, wherein a non-erasable storage (6) 
stores the second key and/or the signature key at time of its issuing. 

33>\priginal) The chip card according to claim 32, further comprising a storage (6) for 
storing at ieasra third key for external authentication and/or release control of the information 
unit and processing means (7) for processing the third key. 

34. (Qriginal)Vhe chip card according to claim 33, wherein said processing means (7) 
initiates download of a new release of the information unit, depending on the respective status of 
the third key. \ 

35. (Currently Amende* A drip card accepting device (2), in particular a ohip card 
reader, for securely handling an Wormation unit by interoperating with a chip card (1), 
comprising a storage for storing the information uni t means for receiving at least one key from a 
chip card, and means for crypto grapMcaUweprocessing the information unit by using the at least 
onekev * \ 

36. (Original) The chip card accepting device according to claim 35, further comprising 
means for decrypting the information unit by using aileast one key, 

37. (Original) The chip card accepting device according to claim 36, further comprising 
means for verifying a digital signature. \ 

10 \ 
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\ 38. (Original) The chip card accepting device according to claim 37, further comprising 
means for downloading the encrypted information unit, the at least one key and the digital 
signature firom a central server (4). 

39. (Original) The chip card accepting device according to claim 35, farther comprising a 
storage for storing, at least a third key for external authentication and/or release control of the 
information unit andWocessing means for processing the third key. 

40. (Original) Thechip card accepting device according to claim 39, further comprising 
means to initiate download of\a new release of the information unit, depending on the respective 
status ofthe third key, \ 

41. (Currently Amended) A\program storage device readable by machine, tangibly 
embodying a program of instructions executable by the machine to perform method steps for 
securely handling an information unit by a first information processing device (2) interoperating 
with a second secure information processing device (1), tft particular a chip oard; whereby the 
information unit is provided by an issuer, said method steps comprising: 

providing transmitting (3, 25, 35) the information unit from the issuer to the first 
information processing device (2), the informadonVmit being processed by a cryptographic 
process; \ 

providing at least one key for the cryptographic process on the second secure information 
processing device (1); and \ 

11 \ 
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\ the first information processing device f i) receiving the at least one key from the second 
information processing device, and (ii) cryptographically reprocessing (29, 38) the information 
unit by usmg the at least one key. 

42. (Pi© viously Presented) A program storage device according to claim 4 1 , said method 
steps further comprising: 

providing (3, 25, 35) the information unit from the issuer to the first information 
processing device (2)\ the information unit being encrypted by using at least a first key; providing 
the first key from the iWer to the first information processing device (2), the first key being 
encrypted by using at least a second key; 

providing the at leasf\pne second key on the second secure information processing device 

(i); \ 

interconnecting the firsts information processing device (2) and the second secure 
.information processing device (1);\ 

on side of the second secure information processing device, decrypting (27) the at least 
first key by using the at least second keA and 

decrypting (29) the information uni\by using the decrypted at least first key. 

43. (Previously Presented) A program storage device according to claim 4 1 , said method 
steps further comprising: \ 

providing (3, 25, 35) the information unit Vom the issuer to the first information 
processing device (2), the information unit being signed by using a signature; 

12 \ 
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providing the signature from the issuer to the first infonnation processing device (2), the 
signature beh& generated by using at least one key; 

providing me at least one key for signature verification on the second secure information 
processing device (1);\ 

interconnecting the ifrst information processing device (2) and the second secure 
information processing device (1}K 

transferring the at least one kfev for signature verification from the second secure 
information processing device to the first information processing device to the first information 
processing device; and \ 

verifying the signature of the information unit ^ping the at least one key. 
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